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IN THE CLAIMS 



1 1. [currently amended] Method for monitoring of a communication link between a 

2 source network node and a destination network node, wtaeh comprising 

3 - employing, on said communication link A employs the IPSec protocol for 

4 tunneling P packets between the source network node and the destination 

5 network node , said-method^mprisifig-atJea 

6 -transmitting an acknowledgement packet by the destination network 

7 node if at least one of a first condition and a second condition is fulfilled, said first 

8 condition being the reception of at least a predetermined number of IPSec packets 

9 after transmission of the previous acknowledgement packet, and said second 

1 0 condition being the reception of an IPSec packet via the communication link after a 

1 1 predetermined time has passed after transmission of the previous 
1 2 acknowledgement packet. 

1 2. [currently amended] A-roeti^d-acGQfdmg4^ Method for monitoring of a 

2 communication link between a source network node and a destination network node. 

3 comprising 

4 - employing, on said communication link, the IPSec protocol for tunneling IP 

5 packets between the source network node and the destination network node. 

6 - transmitting an acknowledgement packet by the destination network 

7 node if at least one of a first condition and a second condition is fulfilled. , wherein 

8 said acknowledgement packet comprises at least the sequence number of the 

9 last received IPSec packet and at least one value corresponding to the amount of 

I 0 data received via the iPSeccommunication link^ 

I I said first condition being the reception of at least a predetermined number of 
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1 2 IPSec packets after transmission of the previous acknowledgement packet, and 

1 3 said second condition being the reception of a packet via the communication link 

1 4 after a predetermined time has passed after transmission of the previous 

1 5 acknowledgement packet. . 

1 3. [original] A method according to claim 2, wherein said acknowledgement packet 

2 comprises at least a packet counter value indicating the number of packets received via 

3 the communication link. 

1 4. [original] A method according to claim 2, wherein said acknowledgement packet 

2 comprises at least a byte counter value indicating the number of bytes received via the 

3 communication link. 

1 5. [original] A method according to claim 2, wherein said acknowledgement packet 

2 comprises at least a packet counter value indicating the number of packets received via 

3 the communication link and a byte counter value indicating the number of bytes received 

4 via the communication link. 

1 6. [original] A method according to claim 2, further comprising at least the step of 

2 determining the packet success rate of the communication link at least partly on the basis 

3 of information contained in an acknowledgement packet. 

1 7, [original] A method according to claim 2, further comprising at least the step of 

2 determining the throughput of the communication link at least partly on the basis of 

3 information contained in an acknowledgement packet. 
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1 8. [currently amended] A method acGOfdin§40-Glaim4 

2 steps- of for monitoring of a communication link between a source network node and a 

3 destination network node, comprising 

4 - employing, on said communication link, the IPSec protocol for tunneling IP 

5 packets between the source network node and the destination network node. 

6 - transmitting an acknowledgement packet by the destination network 

7 node if at least one of a first condition and a second condition is fulfilled, 

8 said first condition being the reception of at least a predetermined number 

9 of IPSec packets after transmission of the previous acknowledgement 

I 0 packet, and 

I I said second condition being the reception of an IPSec packet via the 
1 2 communication link after a predetermined time has passed after 

1 3 transmission of the previous acknowledgement packet 

1 4 - storing of the sequence number and the transmission time of each IPSec 

1 5 packet transmitted from the source network node to the destination network node 

16 in a memory means, and 

1 7 - determining the round trip time of the communication link on the basis of 

1 8 the reception time of an acknowledgement packet and the stored transmission 

1 9 time of the corresponding transmitted packet. 

1 9. [currently amended] Method for monitoring of a plurality of communication links 

2 between a source network site and a destination network site, each of the sites having 

3 at least one network node, 

4 in which method an active communication link is monitored and an inactive communication 
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5 link is monitored, 

6 said method comprising at least the following steps for monitoring an active 

7 communication link between the source network site and the destination network site, the 

8 active communication link employing the IPSec protocol: 

9 the step of transmission of an acknowledgement packet by the destination 

I 0 network node if at least one of a first condition and a second condition is fulfilled, 

I I said first condition being the reception of at least a predetermined number 
1 2 of IPSec packets after transmission of the previous acknowledgement 

1 3 packet, and 

1 4 said second condition being the reception of a packet via the 

1 5 communication link after a predetermined time has passed after 

1 6 transmission of the previous acknowledgement packet, 

1 7 and said method comprising at least the following steps for monitoring an inactive 

1 8 communication link between the source network site and the destination network site: 

1 9 - transmitting a probe packet from a source node at the source network 

2 0 site via said inactive communication link to a destination node at the destination 
2 1 network site, 

2 2 - storing the transmission time of said probe packet in a memory means, 

2 3 - transmitting a response packet from said destination node to said source 

24 node as a response to receiving a probe packet, 

2 5 - determining the round trip time of said inactive communication link from 

26 the difference of the reception time of the response packet and the stored 

2 7 transmission time of the corresponding probe packet 

28 - maintaining present status of said active and inactive communications 

29 links or replacing said active communication link with said inactive communication 
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link based on results of said monitoring . 



1 10. [original] A method according to claim 9, said method further comprising the steps of 

2 - transmitting a plurality of probe packets from said source node at the 

3 source network site via said inactive communication link to said destination node 

4 at the destination network site, 

5 - receiving response packets to said probe packets, and 

6 - determining the packet success rate of said inactive communication link 

7 from the number of said received response packets and the number of 

8 transmitted probe packets. 

1 11. [currently amended] A network node f€W^GfFH#URieatif>§^ 

2 a-sesoFK^f^twoi^ode^/te^ comprising at least 

3 - means for communicating over a IPSec protocol communication link with 

4 a second network node using IPSec packets in order to tunnel IP packets 

5 transmitted to said second network node, 

6 - means for sending acknowledgment packets for said IPSec packets 

7 containing IP packets. 

8 - means for receiving said acknowledgement packets for said IPSec 

9 packets tfaf^mitte^-fey-toe-netwo^node , 

1 0 - means for obtaining a sequence number of an IPSec packet from said a 

1 1 received acknowledgement packet, 

1 2 - means for obtaining a value from said the acknowledgement packet, said 

1 3 value corresponding to the amount of data received via the communication link by 

1 4 said the second network node, and 
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1 5 - means for determining the packet success rate of the communication link 

I 6 at least partly on the basis of said value. 

1 12. [original] A network node according to claim 1 1 , further comprising at least means 

2 for determining the throughput of the communication link at least partly on the basis of 

3 said value. 

1 13. [currently amended] A network node aGGording4G-€laim-1-1- r further comprising-at 

2 least comprising at least 

3 - means for communicating over a IPSec protocol communication link with 

4 a second network node in order to tunnel IP packets transmitted to said second 

5 network node. 

6 - means for sending IPSec packets containing IP packets, 

7 - means for receiving acknowledgement packets for said IPSec packets, 

8 - means for obtaining a sequence number of an IPSec packet from a 

9 received acknowledgement packet, 

1 0 - means for storing in a memory means the sequence number and the 

I I transmission time of each IPSec packet transmitted by the network node via the 
1 2 communication link, and 

1 3 - means for determining the round trip time of the communication link on the 

1 4 basis of the reception time of an acknowledgement packet and the stored 

1 5 transmission time of the corresponding transmitted packet. 

1 14. [currently amended] A network node for communicating with the IPSec protocol with 

2 a second network node via a communication link, said network node comprising at least 
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3 - means for communicating over a IPSec protocol communication link with 

4 a second network node in order to tunnel IP packets transmitted from said second 

5 network node, 

6 - means for sending IPSec packets containing IP packets, 

7 ^means for transmission of transmitting an acknowledgement packet if at 

8 least one of a first condition and a second condition is fulfilled, 

9 said first condition being the reception of at least a predetermined number 

I 0 of IPSec packets after transmission of the previous acknowledgement 

I I packet, and 

1 2 said second condition being the reception of a packet via the 

1 3 communication link after a predetermined time has passed after 

1 4 transmission of the previous acknowledgement packet. 

1 15. [currently amended] A network node aGGGfding-to-daim^^ 

2 furthef .comprising at least 

3 - means for communicating over a IPSec protocol communication link with 

4 a second network node in order to tunnel IP packets transmitted from said second 

5 network node. 

6 - means receiving IPSec packets containing IP packets, 

7 - means transmitting an acknowledgement packet if at least one of a first 

8 condition and a second condition is fulfilled,- 

9 i_means for including inserting a sequence number of a received IPSec 

I 0 packet and at least one value corresponding to the amount of data received via 

I I the communication link in said acknowledgement packed 

1 2 said first condition being the reception of at least a predetermined number of IPSec 
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1 3 packets after transmission of the previous acknowledgement packet, and 

1 4 said second condition being the reception of a packet via the communication link after a 

1 5 predetermined time has passed after transmission of the previous acknowledgement 

1 6 packet . 

1 16. [currently amended] A network node according to claim 15, said network node 

2 further comprising at least means for inctudinfr inserting a packet counter value in said 

3 acknowledgement packet, said packet counter value indicating the number of packets 

4 received via the communication link. 

1 17. [currently amended] A network node according to claim 15, said network node 

2 further comprising at least means for including- inserting a byte counter value in said 

3 acknowledgement packet, said byte counter value indicating the number of bytes 

4 received via the communication link. 

1 1 8. [currently amended] A network node fer^somnfWrkxati^ protocol 

2 wifo^-secoi^H^twefk-nede^^^ comprising at 

3 least 

4 - means for communicating over a IPSec protocol communication link with 

5 a second network node in order to tunnel IP packets transmitted from said second 

6 network node. 

7 - means for tra^smission-of - transmitting an acknowledgement packet if at 

8 least one of a first condition and a second condition is fulfilled, 

9 said first condition being the reception of at least a predetermined number 
1 0 of IPSec packets after transmission of the previous acknowledgement 
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1 1 packet, and 

1 2 said second condition being the reception of a packet via the 

1 3 communication link after a predetermined time has passed after 

1 4 transmission of the previous acknowledgement packet, 

1 5 - means for sending IPSec packets, 

1 6 - means for receiving acknowledgement packets for said IPSec packets 

1 7 transmitted by the network node, 

1 8 - means for obtaining a sequence number of an IPSec packet from a 

1 9 received acknowledgement packet, 

20 - means for obtaining a value from the acknowledgement packet, said 

2 1 value corresponding to the amount of data received via the communication link by 

22 the second network node, and 

2 3 - means for determining the packet success rate of the communication link 
24 at least partly on the basis of said value. 

1 19. [currently amended] Software program product for a network node for 

2 communicating with the IPSec protocol with a second network node via a communication 

3 link, said software program product comprising at least 

4 - software program code communicating over a IPSec protocol 

5 communication link with a second network node in order to tunnel IP packets 

6 transmitted from said second network node. 

7 - software program code receiving IPSec packets containing IP packets. 

8 - software program code means for transmission of transmitting an 

9 acknowledgement packet if at least one of a first condition and a second 
1 0 condition is fulfilled, 
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1 1 said first condition being the reception of at least a predetermined number 

1 2 of IPSec packets after transmission of the previous acknowledgement 

1 3 packet, and 

1 4 said second condition being the reception of a packet via the 

1 5 communication link after a predetermined time has passed after 

1 6 - transmission of the previous acknowledgement packet, 

1 7 - software program code means for receiving acknowledgement packets 

1 8 for IPSec packets transmitted by the network node, 

1 9 - software program code means for obtaining a sequence number of an 

20 IPSec packet from a received acknowledgement packet, 

2 1 - software program code means for obtaining a value from the 

2 2 acknowledgement packet, said value corresponding to the amount of data 

23 received via the communication link by the second network node, and 

24 - software program code means for determining the packet success rate 

25 of the communication link at least partly on the basis of said value. 

1 20. [new] Software program product for a network node for communicating with the 

2 IPSec protocol with a second network node via a communication link, said software 

3 program product comprising at least 

4 - software program code communicating over a IPSec protocol 

5 communication link with a second network node in order to tunnel IP packets 

6 transmitted to said second network node, 

7 - software program code sending IPSec packets containing IP packets, 

8 - software program code receiving acknowledgement packets for said 

9 IPSec packets, 
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1 0 - software program code obtaining a sequence number of an IPSec 

1 1 packet from a received acknowledgement packet, 

1 2 - software program code storing in a memory means the sequence 

1 3 number and the transmission time of each IPSec packet transmitted by the 

1 4 network node via the communication link, and 

1 5 - software program code determining the round trip time of the 

1 6 communication link on the basis of the reception time of an acknowledgement 

1 7 packet and the stored transmission time of the corresponding transmitted packet. 

1 21 . [new] Method for monitoring of a communication link between a source network 

2 node and a destination network node, comprising 

3 - employing, on said communication link, the IPSec protocol for tunneling IP 

4 packets of one or more TCP/IP connections between the source network node 

5 and the destination network node, 

6 - transmitting, separately from TCP retransmission scheme carried out on 

7 said one or more TCP/IP connections, an acknowledgement packet by the 

8 destination network node if at least one of a first condition and a second condition 

9 is fulfilled, 

I 0 said first condition being the reception of at least a predetermined number 

I I of IPSec packets after transmission of the previous acknowledgement 
1 2 packet, and 

1 3 said second condition being the reception of an IPSec packet via the 

1 4 communication link after a predetermined time has passed after 

1 5 transmission of the previous acknowledgement packet. 
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1 22. [new] A method according to claim 21 , comprising tunneling IP packets of two or 

2 more TCP/IP connections by means of said communication link using the IPSec protocol. 
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